Pages

Tuesday, July 26, 2011

You may not be ready to ditch Facebook for good, but now that you've had a chance to kick the tires on Google+, you might be ready to make it your go-to social network. The problem: You've built up a lot of friends, photos, videos, and other data on Facebook over the years, and you don't want to simply lose all that data. Here's how to migrate it all from Facebook to Google+.

When Google+ came out, it's success was very much up in the air (remember Google Buzz?). However, it seems a lot of people have already thrown themselves into Google+ full force—Facebook may have 750 million users, but Google+ has already crossed the 20 million user milestone in only 30 days. If you're ready to give it a shot as your main network, here's what you need to do.

Migrate Your Friends

A social network is nothing without a group of friends with whom to talk, so the first thing you'll want to do is migrate your friends. Not everyone you know is going to be on Google+ yet, but it's a good idea to make sure you don't leave anybody out—and you can always send those other late adopters an invite to encourage them.

The easiest way to migrate your Facebook friends is to import them through a Yahoo email address. I know that sounds awful, but hear me out: While a few people have created browser extensions and other migration methods, Facebook shuts them down pretty quickly, since they don't like non-partners pulling friend data. In addition, the non-Yahoo methods usually add your Facebook friends to Google Contacts, which you probably don't want. You may not have a Yahoo account, but that's what makes this method great—no need to fill up your main address book with Facebook junk. Plus, it really does only take a few minutes.

To do this, head to mail.yahoo.com and click the Create New Account button (if you already have a Yahoo or Flickr account, you can skip this step). Once you've created an account, sign in and head to the Contacts tab. Click on "Import Contacts" and choose the Facebook option. You should now see all your Facebok friends in your Yahoo address book.

Lastly, head to Google+ and go to the Circles tab. Click "Find and Invite" and click the Yahoo button. It'll add all your Yahoo Contacts (or Facebook Friends, in this case), to the Find and Invite page and you can add your Facebook friends to your circles. I, for one, was shocked at how many of my friends were already using Google+ without me knowing.

Migrate Your Photos

Migrating your photos is ridiculously easy with the previously mentionedMove Your Photos Chrome extension. Install it, click on its icon in the extension bar, and log in to your Facebook account. Select the photos you want to transfer and click the upload button at the very bottom of the page. You'll see the progress in the lower right-hand corner. Don't log out while it works, just let it do its thing.

When it's done, you'll see those albums in Google+. By default, they won't be public, and you can adjust each album's privacy settings by going into them and clicking on the "Edit" link under "Visible To".

If you don't want to use Chrome, you can grab a similar extension for Firefox, but you have to transfer albums one by one. If you have Chrome installed, I recommend using the Chrome extension just this once because it's much faster.

Migrate Your Videos

The only way to migrate your videos, unfortunately, is to download the entirety of your Facebook data and re-upload them. To do this, head to Account > Account Settings, and scroll down to "Download Your Information". Hit the "learn more" link and hit he Download button. It will take awhile to gather your info, but you'll receive an email when it's done, and you can download a ZIP file full of your photos, videos, and profile information.

Strangely, when I did this, one of my two videos was missing from the "videos" folder in the ZIP file. However, I was still able to download that video from Facebook by installing the Video Download Helperextension for Firefox, navigating to the video you want to download, playing it, and clicking the arrow next to Download Helper's icon in the add-on bar.

Once you've wrangled all the videos you want to move to Google+, you'll just have to upload them one by one. Head into Google+, click on your profile, and go to "Videos". Hit the "Upload New Videos" link and re-upload your videos to your Google+ profile.

Update Both Networks at Once

Now that all your data's been migrated, you can enjoy using Google+ as your main social network. However, chances are you still have a few friends on Facebook you want to keep up with. You can update your status on both networks at once using Facebook's "Upload via Email" feature. Just head to Facebook's mobile page, copy your Upload via Email email address, and add it to its own "Facebook" circle on Google+. From now on, when you update your status on Google+, you can just include your Facebook circle to send that status to Facebook as well.

This method isn't perfect, however: it'll only work with statuses of up to 50 characters, and it doesn't work with photos. However, it's the best we have at the moment, and it does have the advantage of working over both desktop and mobile. I personally have found that I usually share slightly different things on Facebook and Google+, and when I do want to share similar, longer status updates, it's not that hard to just copy and paste them for now.

It's also worth mentioning the previously mentionedGoogle+Facebook extension. While it's a much easier way to update both statuses at once, it's been hit by a bit of controversy, which you can read more about over at our post and on this Reddit thread. The company has responded to accusations of malware injection, and it seems more accidental than something that was actually of malicious intent, but we still recommending you use this at your own risk. The "update by email" method is still the safest, but this is a possibility as well.

There isn't a foolproof, one-step way to migrate your data, but this should help make the process quite a bit easier for you Google+ fans out there. Got any of your own migration tips to share? Let us know in the comments.

Saturday, July 23, 2011

Read it all here: http://codebutler.github.com/firesheep/

When logging into a website you usually start by submitting your username and password. The server then checks to see if an account matching this information exists and if so, replies back to you with a "cookie" which is used by your browser for all subsequent requests.

It's extremely common for websites to protect your password by encrypting the initial login, but surprisingly uncommon for websites to encrypt everything else. This leaves the cookie (and the user) vulnerable. HTTP session hijacking (sometimes called "sidejacking") is when an attacker gets a hold of a user's cookie, allowing them to do anything the user can do on a particular website. On an open wireless network, cookies are basically shouted through the air, making these attacks extremely easy.

This is a widely known problem that has been talked about to death, yet very popular websites continue to fail at protecting their users. The only effective fix for this problem is full end-to-end encryption, known on the web as HTTPS or SSL. Facebook is constantly rolling out new "privacy" features in an endless attempt to quell the screams of unhappy users, but what's the point when someone can just take over an account entirely? Twitter forced all third party developers to use OAuth then immediately released (and promoted) a new version of their insecure website. When it comes to user privacy, SSL is the elephant in the room.

Today at Toorcon 12 I announced the release of Firesheep, a Firefox extension designed to demonstrate just how serious this problem is.

After installing the extension you'll see a new sidebar. Connect to any busy open wifi network and click the big "Start Capturing" button. Then wait.

As soon as anyone on the network visits an insecure website known to Firesheep, their name and photo will be displayed:

Double-click on someone, and you're instantly logged in as them.

That's it.

Firesheep is free, open source, and is available now for Mac OS X and Windows. Linux support is on the way.

Websites have a responsibility to protect the people who depend on their services. They've been ignoring this responsibility for too long, and it's time for everyone to demand a more secure web. My hope is that Firesheep will help the users win.